Skip to content
OpenAdvisories
High · 7.1 CVE-2023-20587 EUVD-2023-24766GHSA-3jmf-c2v9-xc39

Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially leading to arbitrary code…

Published Feb 13, 2024 · Updated May 7, 2025 · Assigned by AMD

Description

Improper
Access Control in System Management Mode (SMM) may allow an attacker access to
the SPI flash potentially leading to arbitrary code execution.

Affected products

VendorProductAffectedFixed
AMD 3rd Gen AMD EPYC™ Processors various —
AMD 4th Gen AMD EPYC™ Processors various —
AMD 1st Gen AMD EPYC™ Processors various —
AMD 2nd Gen AMD EPYC™ Processors various —
AMD AMD EPYC(TM) Embedded 3000 various —
AMD AMD EPYC(TM) Embedded 7002 various —
AMD AMD EPYC(TM) Embedded 7003 various —
AMD AMD EPYC(TM) Embedded 9003 various —

Advisories 1

References